boringssl/ssl
David Benjamin 338e06771c Reject sessions with the wrong structure version.
The old upstream logic actually didn't do this, but 1.1.0's new code does.
Given that the version has never changed and even unknown fields were rejected
by the old code, this seems a safe and prudent thing to do.

Change-Id: I09071585e5183993b358c10ad36fc206f8bceeda
Reviewed-on: https://boringssl-review.googlesource.com/4942
Reviewed-by: Adam Langley <agl@google.com>
2015-06-01 20:30:02 +00:00
..
pqueue Fix some malloc test crashs. 2015-05-21 18:00:10 +00:00
test Fix DTLS handling of multiple records in a packet. 2015-05-29 22:59:38 +00:00
CMakeLists.txt Add malloc test support to unit tests. 2015-05-21 17:59:48 +00:00
d1_both.c Pass a dtls1_use_epoch enum down to dtls1_seal_record. 2015-05-21 17:59:36 +00:00
d1_clnt.c Remove SSL_in_before and SSL_ST_BEFORE. 2015-05-21 20:51:06 +00:00
d1_lib.c Pass a dtls1_use_epoch enum down to dtls1_seal_record. 2015-05-21 17:59:36 +00:00
d1_meth.c Forbid caller-initiated renegotiations and all renego as a servers. 2015-05-21 20:43:56 +00:00
d1_pkt.c Deprecate SSL_*_read_ahead and enforce DTLS packet boundaries. 2015-05-21 18:29:34 +00:00
d1_srtp.c
d1_srvr.c Decide whether or not to request client certificates early. 2015-05-27 21:53:16 +00:00
internal.h Don't make SSL_MODE_*HELLO_TIME configurable. 2015-05-27 21:47:59 +00:00
s3_both.c Don't make SSL_MODE_*HELLO_TIME configurable. 2015-05-27 21:47:59 +00:00
s3_clnt.c Release handshake buffer when sending no certificate. 2015-05-27 21:54:30 +00:00
s3_enc.c
s3_lib.c Remove renegotiation deferral logic. 2015-05-21 20:50:43 +00:00
s3_meth.c Forbid caller-initiated renegotiations and all renego as a servers. 2015-05-21 20:43:56 +00:00
s3_pkt.c Fix DTLS handling of multiple records in a packet. 2015-05-29 22:59:38 +00:00
s3_srvr.c Decide whether or not to request client certificates early. 2015-05-27 21:53:16 +00:00
ssl_aead_ctx.c Factor SSL_AEAD_CTX into a dedicated type. 2015-05-21 17:59:15 +00:00
ssl_algs.c
ssl_asn1.c Reject sessions with the wrong structure version. 2015-06-01 20:30:02 +00:00
ssl_cert.c Remove remaining calls to the old lock functions. 2015-05-20 19:18:13 +00:00
ssl_cipher.c
ssl_lib.c Deprecate and no-op SSL_set_state. 2015-05-21 20:52:05 +00:00
ssl_rsa.c Switch EVP_PKEY_dup calls to EVP_PKEY_up_ref. 2015-05-06 22:57:09 +00:00
ssl_sess.c Remove remaining calls to the old lock functions. 2015-05-20 19:18:13 +00:00
ssl_stat.c Remove SSL_in_before and SSL_ST_BEFORE. 2015-05-21 20:51:06 +00:00
ssl_test.cc Reject sessions with the wrong structure version. 2015-06-01 20:30:02 +00:00
ssl_txt.c
t1_enc.c Release handshake buffer when sending no certificate. 2015-05-27 21:54:30 +00:00
t1_lib.c Switch three more renegotiate checks to initial_handshake_complete. 2015-05-21 18:31:55 +00:00
t1_reneg.c